Hello,

do you have config modparam set for tls? Like:

modparam("tls", "config", "/usr/local/etc/kamailio/tls.cfg")

Or are those all your parameters for tls module?

Cheers,
Daniel

On 09/05/16 14:05, Sunil More wrote:

Hello Daniel, 

I am using this ..

loadmodule "tls.so"
modparam("tls", "tls_method", "TLSv1")
modparam("tls", "certificate", "/usr/local/kamailio/etc/kamailio/cc_kamailio/my_cert.net.crt")
modparam("tls", "private_key", "/usr/local/kamailio/etc/kamailio/cc_kamailio/my_key.net.key")
modparam("tls", "verify_certificate", 0)
modparam("tls", "require_certificate", 0)

Thanking You,
Sunil More
Ph : 9503338275

On Mon, May 9, 2016 at 5:32 PM, Daniel-Constantin Mierla <miconda@gmail.com> wrote:

Hello,

look at your tls.cfg file (or modparams for tls module) and change the setting for requiring tls certificate for clients.

Cheers,
Daniel

On 09/05/16 13:44, Sunil More wrote:

Hello All,

I am trying to connect Kamailio over WSS and the error I get is "tls_accept: client did not present a certificate" . It works fine for WS, however Please guide me to connect over WSS.

the following are the logs i See..

DEBUG: tls [tls_domain.c:703]: sr_ssl_ctx_info_callback(): SSL handshake started

DEBUG: <core> [tcp_main.c:2430]: tcpconn_do_send(): sending...

ay  9 11:07:01 P172 /usr/local/kamailio/sbin/kamailio[32025]: DEBUG: tls [tls_domain.c:715]: sr_ssl_ctx_info_callback(): SSL handshake done

May  9 11:07:01 P172 /usr/local/kamailio/sbin/kamailio[32025]: DEBUG: tls [tls_domain.c:718]: sr_ssl_ctx_info_callback(): SSL disable renegotiation

May  9 11:07:01 P172 /usr/local/kamailio/sbin/kamailio[32025]: DEBUG: tls [tls_server.c:411]: tls_accept(): TLS accept successful

May  9 11:07:01 P172 /usr/local/kamailio/sbin/kamailio[32025]: DEBUG: tls [tls_server.c:418]: tls_accept(): tls_accept: new connection from sunilmore.in:49703 using TLSv1/SSLv3 AES256-SHA 256

May  9 11:07:01 P172 /usr/local/kamailio/sbin/kamailio[32025]: DEBUG: tls [tls_server.c:421]: tls_accept(): tls_accept: local socket:sunilmore.in:10082

May  9 11:07:01 P172 /usr/local/kamailio/sbin/kamailio[32025]: DEBUG: tls [tls_server.c:432]: tls_accept(): tls_accept: client did not present a certificate

And the websocket closes. Please help.

Thanking You,
Sunil More
Ph : 9503338275

_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
sr-users@lists.sip-router.org
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

-- 
Daniel-Constantin Mierla
http://www.asipto.com
http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda
Kamailio World Conference, Berlin, May 18-20, 2016 - http://www.kamailioworld.com

_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
sr-users@lists.sip-router.org
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

-- 
Daniel-Constantin Mierla
http://www.asipto.com
http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda
Kamailio World Conference, Berlin, May 18-20, 2016 - http://www.kamailioworld.com